Hi,
I have got the crash dump of this error from the customer side.
Not got any details of how the bug is reproduced.Following is the
error,
*****************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {ec513000, 0, ba7dd752, 1}
Kernel symbols are WRONG. Please fix symbols to do analysis.
************
***
***
*** Your debugger is not using the correct symbols
***
*** In order for this command to work properly, your symbol path
*** must point to .pdb files that have full type information.
***
Certain .pdb files (such as the public OS symbols) do not
*** contain the required information. Contact the group that
*** provided you with these symbols if you need this command to
*** work.
***
*** Type referenced: nt!_KPRCB
***
Probably caused by : ScdFs.SYS ( ScdFs!ScdOpenTargetDirectory+25b )
Followup: MachineOwner
---------
1: kd> !analyze -v
Bugcheck
Analysis
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by
try-except,
it must be protected by a Probe. Typically the address is just plain
bad or it
is pointing at freed memory.
Arguments:
Arg1: ec513000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: ba7dd752, If non-zero, the instruction address which referenced
the bad memory
address.
Arg4: 00000001, (reserved)
Debugging Details:
------------------
Kernel symbols are WRONG. Please fix symbols to do analysis.
Your debugger is not using the correct symbols
In order for this command to work properly, your symbol path
must point to .pdb files that have full type information.
Certain .pdb files (such as the public OS symbols) do not
contain the required information. Contact the group that
provided you with these symbols if you need this command to
work.
Type referenced: nt!_KPRCB
READ_ADDRESS: unable to get nt!MmPoolCodeEnd
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSpecialPoolStart
unable to get nt!MmPagedPoolStart
unable to get nt!MiSessionPoolStart
unable to get nt!MiSessionPoolEnd
unable to get nt!MmNonPagedPoolExpansionStart
unable to get nt!MmPoolCodeStart
ec513000
FAULTING_IP:
ScdFs!ScdOpenTargetDirectory+25b
ba7dd752 f3a5 rep movsd
MM_INTERNAL_CODE: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from 8052fa2f to 80543ac9
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may
be wrong.
b95da620 8052fa2f 00000050 ec513000 00000000 nt!KeBugCheckEx+0x19
b95da670 804e2dfc 00000000 ec513000 00000000 nt!KeRundownQueue+0xdfbf
b95da688 ba7ebee3 ffffffff b95da6ac 8982d120 nt!Kei386EoiHelper+0x277c
b95da6bc 89620023 ec512ef0 00000001 000000e0 ScdFs!ESendMessage+0x6
89820023 07010000 00000009 96e4b804 96e4a889 0x89620023
00979200 00000000 00000000 00000000 00000000 0x7010000
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
ScdFs!ScdOpenTargetDirectory+25b
ba7dd752 f3a5 rep movsd
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: ScdFs!ScdOpenTargetDirectory+25b
MODULE_NAME: ScdFs
IMAGE_NAME: ScdFs.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4046570f
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
While going through this error I have found that the bug is in my
file system driver in OpenTargetDirectory function.This function will
usually get called when doing some rename operation for a directory
or file.Is there anyother scenarios in which this routine gets called?
Inside this opentargetdirectory the instruction at which it fails is
while creating a ccb.While creating the ccb it opens the correspoding
directory.Here it makes use of a global inmemory data structure
allocated from NON_PAGED_POOL.But I’m not able to make out why this
page fault has occured.Can anyone explain in fixing this issue.
Regards,
Priya
Get your Free E-mail at http://freelancewriting.zzn.com
___________________________________________________________
Get your own Web-based E-mail Service at http://www.zzn.com
priya priya wrote:
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
Your first step in getting help would be to re-post your question with
the proper set of symbols setup in the debugger. It is entirely
pointless to look at the output of a crash dump with the wrong symbols.
Peter
OSR
Hi,
For me the defect is obvious. The ScdFs driver trying to execute the paged
code on raised IRQL.
The user is using very old version of InCD. You can suggest to the user
download newest version of InCD4
from Nero Web site and repeat reproduction steps. If defect will be
reproduced again you can contact me directly.
Best regards,
Oleksiy
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of priya priya
Sent: Thursday, January 06, 2005 2:48 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Page Fault In NonPaged Area
Hi,
I have got the crash dump of this error from the
customer side.
Not got any details of how the bug is
reproduced.Following is the
error,
**********************************************************************
Use !analyze -v to get detailed debugging
information.
BugCheck 50, {ec513000, 0, ba7dd752, 1}
***** Kernel symbols are WRONG. Please fix symbols
to do analysis.
**********************************************************************
***
***
***
***
***
*** Your debugger is not using the correct
symbols
***
***
***
*** In order for this command to work properly,
your symbol path
***
*** must point to .pdb files that have full type
information.
***
***
***
*** Certain .pdb files (such as the public OS
symbols) do not
***
*** contain the required information. Contact
the group that
***
*** provided you with these symbols if you need
this command to
***
*** work.
***
***
***
*** Type referenced: nt!_KPRCB
***
***
***
**********************************************************************
***
Probably caused by : ScdFs.SYS (
ScdFs!ScdOpenTargetDirectory+25b )
Followup: MachineOwner
1: kd> !analyze -v
**********************************************************************
*********
*
*
* Bugcheck
Analysis *
*
*
**********************************************************************
*********
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot
be protected by
try-except,
it must be protected by a Probe. Typically the
address is just plain
bad or it
is pointing at freed memory.
Arguments:
Arg1: ec513000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write
operation.
Arg3: ba7dd752, If non-zero, the instruction address
which referenced
the bad memory
address.
Arg4: 00000001, (reserved)
Debugging Details:
***** Kernel symbols are WRONG. Please fix symbols
to do analysis.
**********************************************************************
***
***
***
***
***
*** Your debugger is not using the correct
symbols
***
***
***
*** In order for this command to work properly,
your symbol path
***
*** must point to .pdb files that have full type
information.
***
***
***
*** Certain .pdb files (such as the public OS
symbols) do not
***
*** contain the required information. Contact
the group that
***
*** provided you with these symbols if you need
this command to
***
*** work.
***
***
***
*** Type referenced: nt!_KPRCB
***
***
***
**********************************************************************
***
READ_ADDRESS: unable to get nt!MmPoolCodeEnd
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSpecialPoolStart
unable to get nt!MmPagedPoolStart
unable to get nt!MiSessionPoolStart
unable to get nt!MiSessionPoolEnd
unable to get nt!MmNonPagedPoolExpansionStart
unable to get nt!MmPoolCodeStart
ec513000
FAULTING_IP:
ScdFs!ScdOpenTargetDirectory+25b
ba7dd752 f3a5 rep movsd
MM_INTERNAL_CODE: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from 8052fa2f to 80543ac9
STACK_TEXT:
WARNING: Stack unwind information not available.
Following frames may
be wrong.
b95da620 8052fa2f 00000050 ec513000 00000000
nt!KeBugCheckEx+0x19
b95da670 804e2dfc 00000000 ec513000 00000000
nt!KeRundownQueue+0xdfbf
b95da688 ba7ebee3 ffffffff b95da6ac 8982d120
nt!Kei386EoiHelper+0x277c
b95da6bc 89620023 ec512ef0 00000001 000000e0
ScdFs!ESendMessage+0x6
89820023 07010000 00000009 96e4b804 96e4a889
0x89620023
00979200 00000000 00000000 00000000 00000000
0x7010000
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
ScdFs!ScdOpenTargetDirectory+25b
ba7dd752 f3a5 rep movsd
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: ScdFs!ScdOpenTargetDirectory+25b
MODULE_NAME: ScdFs
IMAGE_NAME: ScdFs.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4046570f
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
**********************************************************************
While going through this error I have found that the
bug is in my
file system driver in OpenTargetDirectory
function.This function will
usually get called when doing some rename operation
for a directory
or file.Is there anyother scenarios in which this
routine gets called?
Inside this opentargetdirectory the instruction at
which it fails is
while creating a ccb.While creating the ccb it opens
the correspoding
directory.Here it makes use of a global inmemory
data structure
allocated from NON_PAGED_POOL.But I’m not able to
make out why this
page fault has occured.Can anyone explain in fixing
this issue.
Regards,
Priya
Get your Free E-mail at
http://freelancewriting.zzn.com
Get your own Web-based E-mail Service at
http://www.zzn.com
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: xxxxx@nero.com
To unsubscribe send a blank email to
xxxxx@lists.osr.com